Sophos

Troj/Agent-GUX

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from May 2008 (4.29)
Protection available since 2 April 2008 13:56:27 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Agent-GUX is a Trojan for the Windows platform.

Troj/Agent-GUX includes functionality to access the internet and communicate with a remote server via HTTP.

When Troj/Agent-GUX is installed it creates the file <Windows>\uerj45kj.sys.

The file uerj45kj.sys is detected as Mal/RKRustok-A.

The file uerj45kj.sys is registered as a new system driver service named "uerj45kj". Registry entries are created under:

HKLM\SYSTEM\CurrentControlSet\Services\uerj45kj

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer